Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/edaf69-bc5d-494e-9d87-7c740ef8aa95/1/dDCaoBSMyQ_O2ZQ-sagZRumtrl4.mft
File: dDCaoBSMyQ_O2ZQ-sagZRumtrl4.mft (raw, json)
Hash identifier: rilgA5MRxhq5FR5/GNdAwrYubpNxsZc7tOG8fjPHzx0=
Subject key identifier: F0:99:FC:5F:C7:42:FE:D6:9A:C6:EC:F0:97:A7:C7:B2:1F:37:6A:6C
Authority key identifier: 74:30:9A:A0:14:8C:C9:0F:CE:D9:94:3E:B1:A8:19:46:E9:AD:AE:5E
Certificate issuer: /CN=74309aa0148cc90fced9943eb1a81946e9adae5e
Certificate serial: 0198D5BBBEFE11330AF7D2731A93C4D38D26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dDCaoBSMyQ_O2ZQ-sagZRumtrl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/edaf69-bc5d-494e-9d87-7c740ef8aa95/1/dDCaoBSMyQ_O2ZQ-sagZRumtrl4.mft
Manifest number: 0C11
Signing time: Sat 23 Aug 2025 07:01:47 +0000
Manifest this update: Sat 23 Aug 2025 07:01:47 +0000
Manifest next update: Sun 24 Aug 2025 07:01:47 +0000
Files and hashes: 1: 3P59Feb1jpoB_hwUGftROdmja6Q.roa (hash: vgAncWwhtK3WJUrN8441tfi4l7WNzadgnCcv6cDRfOQ=)
2: 8pYmn7TAGaMCMkGbuhyzK9IB1Gw.roa (hash: MiQ9nf6ClXhcte8AL3HSxhfAjgaZoJoXSOwTUDNQ6GU=)
3: dDCaoBSMyQ_O2ZQ-sagZRumtrl4.crl (hash: 7YpgpPg4+wM+D/JBZdzGTrfmnswqDR6D1alAI7m2ng8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/edaf69-bc5d-494e-9d87-7c740ef8aa95/1/dDCaoBSMyQ_O2ZQ-sagZRumtrl4.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/edaf69-bc5d-494e-9d87-7c740ef8aa95/1/dDCaoBSMyQ_O2ZQ-sagZRumtrl4.mft
rsync://rpki.ripe.net/repository/DEFAULT/dDCaoBSMyQ_O2ZQ-sagZRumtrl4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:be:fe:11:33:0a:f7:d2:73:1a:93:c4:d3:8d:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74309aa0148cc90fced9943eb1a81946e9adae5e
Validity
Not Before: Aug 23 07:01:47 2025 GMT
Not After : Aug 24 07:01:47 2025 GMT
Subject: CN=f099fc5fc742fed69ac6ecf097a7c7b21f376a6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:07:70:f0:bd:30:f0:5c:de:1d:1a:c6:6b:f5:
c5:73:ac:2d:41:fe:28:12:01:24:da:3c:17:c1:20:
82:1e:a1:4e:2c:69:e1:9c:a7:e9:fc:11:86:7a:ee:
f1:c3:93:a5:dc:2f:ea:87:5a:b2:82:09:8b:3d:04:
bf:95:06:82:de:51:07:42:ea:ea:86:bf:6a:6b:47:
7c:b7:8c:95:eb:eb:d8:f2:54:72:be:1d:36:08:cd:
f9:7b:c1:c8:ba:d0:55:f4:45:c7:f9:b6:15:d3:f3:
12:dc:6b:8d:b9:0e:7a:af:77:fc:60:a9:4d:c6:12:
01:a2:c5:e3:2b:ba:9d:86:ef:21:36:ea:90:54:f2:
1d:fe:95:75:91:ba:43:f4:44:01:ed:2a:9c:7f:69:
45:3f:ef:b8:a3:3a:fa:04:e3:b3:93:31:f9:e0:06:
b5:0a:19:66:6d:92:aa:26:a9:06:af:34:79:cd:e5:
28:21:ab:6e:4d:b9:f4:9c:67:6e:3a:64:f2:98:0f:
3a:94:01:2a:4c:45:12:97:b2:2f:6b:bb:f3:6d:09:
35:a7:d6:99:ca:9c:b0:7a:8e:60:e3:4d:5a:d4:95:
2b:9a:6c:a5:11:46:39:29:e4:16:57:bc:ad:bd:df:
82:7b:bf:c2:10:3f:a1:dc:87:b1:d0:ca:67:2d:1b:
60:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:99:FC:5F:C7:42:FE:D6:9A:C6:EC:F0:97:A7:C7:B2:1F:37:6A:6C
X509v3 Authority Key Identifier:
keyid:74:30:9A:A0:14:8C:C9:0F:CE:D9:94:3E:B1:A8:19:46:E9:AD:AE:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dDCaoBSMyQ_O2ZQ-sagZRumtrl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/edaf69-bc5d-494e-9d87-7c740ef8aa95/1/dDCaoBSMyQ_O2ZQ-sagZRumtrl4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/edaf69-bc5d-494e-9d87-7c740ef8aa95/1/dDCaoBSMyQ_O2ZQ-sagZRumtrl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:a3:8b:88:a1:af:91:b2:aa:e5:f3:6e:59:96:d1:ad:3e:be:
7a:30:b6:6c:f0:72:c1:fa:42:4e:74:13:fa:55:60:1d:07:c4:
cc:41:5d:09:ee:49:d2:7d:1d:b7:7d:31:56:bc:5d:3e:35:5f:
ac:ab:e2:a8:ac:e1:c2:4f:10:77:42:d3:5c:cf:de:7d:95:64:
76:91:eb:37:b3:74:d1:cb:56:c4:6c:83:b6:a9:6e:54:51:9d:
c3:b4:59:f0:9d:8a:79:a9:14:4e:9e:92:1c:9b:29:39:77:17:
a3:32:e1:a7:9c:f8:c0:f1:d6:03:0a:09:e2:ce:56:15:6e:1c:
34:b5:a1:b1:32:e5:c9:f5:46:3a:25:1f:45:05:f9:58:9b:1a:
c9:f2:e1:97:4f:30:97:dc:e3:50:b3:a8:db:3b:da:03:d1:74:
c5:a7:7c:7f:97:06:4d:5b:5d:ef:ac:e3:a6:db:6f:1b:b4:a3:
e2:9d:83:9f:fa:83:9b:6b:c5:06:4d:b1:67:3a:80:f5:ce:ae:
1b:a4:94:5a:43:b2:67:0c:22:5d:66:1e:4b:00:6b:d9:f2:80:
5a:b8:b5:50:ce:18:48:a9:11:52:25:04:b9:a3:9d:b8:8e:41:
37:a8:a8:8a:fb:14:5e:84:04:0f:43:7f:a7:89:30:0c:c8:c9:
57:91:6d:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVu77+ETMK99JzGpPE040mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0MzA5YWEwMTQ4Y2M5MGZjZWQ5OTQzZWIxYTgxOTQ2ZTlh
ZGFlNWUwHhcNMjUwODIzMDcwMTQ3WhcNMjUwODI0MDcwMTQ3WjAzMTEwLwYDVQQD
EyhmMDk5ZmM1ZmM3NDJmZWQ2OWFjNmVjZjA5N2E3YzdiMjFmMzc2YTZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygdw8L0w8FzeHRrGa/XFc6wtQf4o
EgEk2jwXwSCCHqFOLGnhnKfp/BGGeu7xw5Ol3C/qh1qyggmLPQS/lQaC3lEHQurq
hr9qa0d8t4yV6+vY8lRyvh02CM35e8HIutBV9EXH+bYV0/MS3GuNuQ56r3f8YKlN
xhIBosXjK7qdhu8hNuqQVPId/pV1kbpD9EQB7Sqcf2lFP++4ozr6BOOzkzH54Aa1
ChlmbZKqJqkGrzR5zeUoIatuTbn0nGduOmTymA86lAEqTEUSl7Iva7vzbQk1p9aZ
ypyweo5g401a1JUrmmylEUY5KeQWV7ytvd+Ce7/CED+h3Iex0MpnLRtgJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPCZ/F/HQv7Wmsbs8Jenx7IfN2psMB8GA1UdIwQY
MBaAFHQwmqAUjMkPztmUPrGoGUbpra5eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZERDYW9CU015UV9PMlpRLXNhZ1pSdW10cmw0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9lZGFmNjktYmM1ZC00OTRlLTlkODct
N2M3NDBlZjhhYTk1LzEvZERDYW9CU015UV9PMlpRLXNhZ1pSdW10cmw0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi9lZGFmNjktYmM1ZC00OTRlLTlkODctN2M3NDBlZjhhYTk1
LzEvZERDYW9CU015UV9PMlpRLXNhZ1pSdW10cmw0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnaOLiKGv
kbKq5fNuWZbRrT6+ejC2bPBywfpCTnQT+lVgHQfEzEFdCe5J0n0dt30xVrxdPjVf
rKviqKzhwk8Qd0LTXM/efZVkdpHrN7N00ctWxGyDtqluVFGdw7RZ8J2KeakUTp6S
HJspOXcXozLhp5z4wPHWAwoJ4s5WFW4cNLWhsTLlyfVGOiUfRQX5WJsayfLhl08w
l9zjULOo2zvaA9F0xad8f5cGTVtd76zjpttvG7Sj4p2Dn/qDm2vFBk2xZzqA9c6u
G6SUWkOyZwwiXWYeSwBr2fKAWri1UM4YSKkRUiUEuaOduI5BN6ioivsUXoQED0N/
p4kwDMjJV5Ft5Q==
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:01:14 2025 by rpki-client